This vulnerability affects Oracle WebCenter Content (component: Content Server) in versions 12.2.1.4.0 and 14.1.2.0.0. It is exploitable remotely without authentication over HTTP but requires user interaction from a third party. The vulnerability can result in complete compromise of the Oracle WebCenter Content system. The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, and high impact on confidentiality, integrity, and availability. The vulnerability is associated with CWE-601 (URL Redirection), CWE-352 (Cross-Site Request Forgery), and CWE-79 (Cross-Site Scripting). The vendor advisory from Oracle (July 2026 Critical Patch Update) lists this vulnerability but does not explicitly confirm patch availability or remediation status for Oracle WebCenter Content. No known exploits in the wild are reported.

Successful exploitation can lead to full takeover of Oracle WebCenter Content, impacting confidentiality, integrity, and availability of the system. An unauthenticated attacker with network access via HTTP can exploit this vulnerability, but it requires human interaction from a user other than the attacker. This could allow attackers to execute unauthorized actions or compromise sensitive content managed by Oracle WebCenter Content.

The Oracle July 2026 Critical Patch Update advisory includes this vulnerability among many others but does not explicitly confirm patch availability or remediation details for Oracle WebCenter Content. Customers are strongly advised to review the Oracle Critical Patch Update advisory at https://www.oracle.com/security-alerts/cpujul2026.html and apply any relevant patches promptly. Until official patches or mitigations are confirmed, organizations should limit network exposure of Oracle WebCenter Content and educate users to be cautious of unsolicited interactions that could trigger exploitation. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.